Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/U14tkML2oHhyUZjw4xb5UX9PBkQ.roa
File: U14tkML2oHhyUZjw4xb5UX9PBkQ.roa (raw, json)
Hash identifier: 2HKtHvrDbBvJk+DbwpVGJ5/tJ++9TaxEcofrwn2XlsQ=
Subject key identifier: 53:5E:2D:90:C2:F6:A0:78:72:51:98:F0:E3:16:F9:51:7F:4F:06:44
Certificate issuer: /CN=c40b6e97bf6013cd2e4da03fabf88eb8ced22935
Certificate serial: 01A1345AACE625C78BC504367878E3B22B87
Authority key identifier: C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/U14tkML2oHhyUZjw4xb5UX9PBkQ.roa
Signing time: Tue 13 Oct 2026 08:21:59 +0000
ROA not before: Tue 13 Oct 2026 08:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24953
IP address blocks: 159.200.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:5a:ac:e6:25:c7:8b:c5:04:36:78:78:e3:b2:2b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40b6e97bf6013cd2e4da03fabf88eb8ced22935
Validity
Not Before: Oct 13 08:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=535e2d90c2f6a078725198f0e316f9517f4f0644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:5a:4c:a4:0c:0e:ce:1f:22:c9:9a:d3:93:
04:61:b0:cb:18:02:29:34:20:1f:a0:32:2c:64:38:
f1:c5:68:e3:9e:3f:eb:36:4d:0b:b5:e1:a2:54:9c:
b3:05:f1:d8:ac:26:c6:49:2d:09:60:44:93:14:3e:
0c:4d:10:18:99:ef:8c:54:7f:66:3a:ba:7d:c9:95:
1b:95:50:4e:e0:b6:b9:58:7b:ab:f8:0e:22:2c:6a:
2d:b0:a1:35:e2:99:bd:b5:84:12:8e:99:79:d9:47:
5d:3a:4b:73:c6:9a:7c:2e:a7:13:cc:0e:f3:36:71:
50:f0:bd:19:96:44:98:ad:98:db:20:79:7a:4d:46:
19:49:b9:0b:c5:67:df:66:ca:df:27:1d:a2:6f:81:
cf:d5:14:e0:c7:31:03:0d:90:a1:60:34:8e:02:c4:
cc:4b:29:16:ba:21:fd:ab:81:c5:18:84:0b:ad:ba:
46:8d:57:5c:51:21:d5:16:72:18:3b:60:57:6f:76:
d9:63:00:ab:09:3a:a4:00:1e:7c:31:ba:ba:8a:62:
db:e6:b0:91:4f:9b:25:6f:a0:20:28:42:25:27:5d:
3b:72:6f:d0:31:08:9d:35:8f:fc:5e:fc:13:1f:b0:
88:c0:f3:d9:d5:7e:e3:9c:0f:2a:74:8c:f4:c6:0d:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:2D:90:C2:F6:A0:78:72:51:98:F0:E3:16:F9:51:7F:4F:06:44
X509v3 Authority Key Identifier:
keyid:C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/U14tkML2oHhyUZjw4xb5UX9PBkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:65:c4:bc:28:61:49:f1:d0:98:6d:e4:cb:74:85:ee:b0:a1:
9c:9b:e5:f1:2d:4e:4c:60:c1:66:3f:e8:f3:c9:a9:2d:2f:8e:
a9:e2:66:e3:7e:98:57:05:f6:9e:4b:6f:d3:ab:8c:b8:12:7c:
8d:bf:63:79:f0:c6:22:3a:51:a8:fb:6b:50:ee:49:06:c1:86:
a2:94:e9:75:34:79:9f:f7:1c:a7:01:67:68:a3:a5:80:1e:72:
45:c6:77:c6:4b:b2:5a:25:36:d0:13:fb:4b:03:0e:9c:5c:50:
5d:dc:67:53:09:59:45:dd:d2:85:a6:d8:63:d5:db:c4:98:6f:
46:8e:69:27:8a:d4:f7:c6:0f:e0:0f:5e:70:99:92:63:3a:bc:
be:39:dc:f9:e1:a9:7d:4c:a8:b9:d5:6e:dc:b5:9e:27:ee:98:
f6:b8:a5:54:f9:4d:1f:79:40:20:f1:3f:da:f5:a1:f1:86:c6:
54:9e:b9:6a:7c:b6:50:cc:68:7f:75:bf:f1:05:05:8b:7c:71:
5d:f4:c5:c8:e6:1e:aa:a3:32:48:b6:1a:aa:0a:34:5f:92:a1:
e1:1b:fe:eb:34:36:23:91:d6:0f:1f:88:16:3d:61:63:6b:a2:
02:73:92:b8:1c:61:09:b6:97:81:6c:eb:6e:12:63:12:33:27:
3f:54:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:55:30 2026 by rpki-client